U.S., Japan and ROK deepen cyber coordination against DPRK revenue networks

Trilateral coordination on North Korea-linked cyber threats is intensifying as the U.S., Japan and the Republic of Korea seek to curb illicit funding streams tied to sanctioned activities. The latest Washington meeting focuses on cryptocurrency theft, laundering and fraudulent IT worker schemes that officials say support the DPRK's weapons and missile programs.

Washington meeting sets joint enforcement agenda As reported by the U.S. Department of State , interagency delegations from the U.S., Japan and the ROK meet in Washington, D.C. on June 25 and 26 at the Trilateral Diplomatic Working Group on DPRK Cyber Threats to coordinate responses to cryptocurrency theft, laundering, IT worker schemes and other malicious cyber activity.

The three governments reiterate their commitment to the complete denuclearization of the DPRK and to cutting off revenue that supports sanctioned activities, including the unlawful development of weapons of mass destruction and ballistic missiles. Participants also restate the importance of continued law enforcement cooperation and coordinated enforcement of international sanctions to prevent malicious cyber activity and illicit revenue generation. Crypto theft and private-sector risks widen Representatives from the three countries express concern over cryptocurrency heists attributed to the DPRK, citing reported incidents including the theft of $290 million from KelpDAO and $285 million from Drift Protocol. They commit to stepping up efforts to expose DPRK cryptocurrency theft and to raise awareness of the threat from DPRK actors in Europe, Southeast Asia and Africa.

Officials also note growing risks from DPRK IT workers using AI capabilities and pledge support for industry efforts to improve detection and mitigation of schemes targeting U.S. and international companies. The delegations thank Coinbase, Mandiant Threat Intelligence, part of Google Cloud Security, Polymarket and Upwork for joining the inaugural private-sector session of the trilateral working group.

Polymarket’s renewed regulatory scrutiny in the U.S. has intensified, with an ongoing CFTC investigation reportedly examining the platform’s activities following questions its marketing practices. Our earlier article noted that the company began auditing promotional content for compliance as it expanded U.S. access, highlighting how quickly the regulatory outlook can shift for prediction-market and crypto-adjacent services.